From a CBC story

A website that lets people check whether their email addresses, usernames and passwords have been stolen in a cyberattack and posted online has been launched by an Australian who is a former IT security consultant.

This new website, shouldichangemypassword.com, allows concerned internet users to enter an email address and see whether it appears in stolen information posted online by groups such as Lulz Security. If an email is listed in the database of stolen data, the site will list what information among your email, username and password have been compromised, how many times it has been compromised, and the most recent incident. It will also recommend that the user change all his or her passwords.

The person behind the site says he plans to keep updating the site whenever a new password database is made public "in perpetuity." Will be interesting to see how long it really lasts – and of course, an all clear doesn't necessarily mean an all clear, but nice to be able to crosscheck if you ID appeared online.

Dan Pinnington is a technology evangelist and is well known for his “tech tips”. As the Director, practicePRO at the Lawyers’ Professional Indemnity Company (LAWPRO), Dan helps lawyers avoid malpractice claims. His vision, energy and ideas have made practicePRO an internationally recognized claims prevention initiative. He is a prolific writer, speaker and blogger on legal malpractice, risk management, legal technology, and law practice management issues. He is a veteran of hundreds of presentations at law firms and conferences all over North America and has chaired more than a dozen major conferences. Dan was inducted as a Fellow of the College of Law Practice Management in 2007. The American Bar Association just published The Busy Lawyer’s Guide To Success: Tips to Power Your Practice, a book he co-authored with Reid Trautz. He is currently Editor-in-Chief of the ABA LPM’s Law Practice magazine, was Chair of ABA TECHSHOW 2007 and helped launch the Law Practice Today Webzine.
[click on the author's name for more information]

up

3 Comments on “Check to See if Your ID Has Been Compromised at New Stolen Password Search Site”

  1. Philippe says:

    Nice way to harvest email addresses…

  2. Mike says:

    If I was going to devise a scheme to steal email addresses and passwords, this is what it would look like.

  3. Seva says:

    this wouldn't steal passwords (since you are not asked to enter one), but definitely good to harvest emails. The response comes back a little too fast.

Make a comment:

Note that some comments may be moderated. If you have not had an approved comment here before, your comment will be held for approval. We are glad to publish comments that address issues raised in the post or other comments on it and that contribute to a fruitful discussion. We do not publish comments that seek to promote commercial products, that make personal attacks, or that seek personal legal advice.

Although we do not require it, we ask that in making a comment you use your full name. You must supply a valid email address, which will not appear with your comment.

 

SlawTips      

SlawTips Cash Flow Reports – Part 2
Thursday, May 24

This is the second in a series of ten tips dealing with cash flow reports and cash flow management. Gregory Nunn once said: “Never underestimate the value of cold cash.”… »»

Practice

SlawTips United Nations Documents
Wednesday, May 23

Today’s Tip: Monitor UN documents with RSS Since I last looked, the United Nations Documents site has a new look and feel. For what the site is trying to deliver, … »»

Research

SlawTips Updated Version of Great Social Media Guide for Lawyers Released
Wednesday, May 23

Last spring, Meritas’ Leadership Institute released a Social Media Guide for Lawyers. This helpful resource provided lawyers with an overview of the three main social media tools — LinkedIn, Faceb. […] »»

Technology

noted on Slaw    

MLB Selected Case Summaries    

These summaries of selected recent cases are provided each week to Slaw by Maritime Law Book.
More information.

  • Aliens - Exclusion and expulsion - Power to detain and deport - Minister’s certificate - Review - Evidence

    In 2002, Harkat was detained pursuant to a ministerial security certificate issued under the Immigration and Refugee Protection Act (IRPA) as a person inadmissible to Canada on grounds ...

  • Contracts - Formation of contract - Signing - Electronic signature

    The plaintiff expressed an interest in purchasing the defendant’s (vendor’s) condo. The parties agreed to carry on their discussions through e-mail. Following an exchange of e-mails, the plaintiff claimed that the defendant was contractually bound to ...

  • Barristers and Solicitors - Relationship with client - Confidential communications - General

    The petitioner was a Receiver appointed in March 2009 by a California court over the assets of GJB Enterprises Inc. (a “Ponzi scheme”) and its principals, the Berkes (the GJB parties). The court ordered ...

  • Practice - Costs - Funding before judgment - When interim or advance costs available

    The plaintiffs were “direct to home” satellite based subscription program providers. Rex and other defendants offered “grey market” services to Canadian residents to facilitate the unauthorized reception in Canada of the plaintiffs’ ...

TalkLaw/ParLoi    

This is a listing of a few upcoming events in Canada of interest to lawyers, law students, legal librarians, and others involved in the practice of law.

Clicking on any event in the list below will give you access to more information and to links allowing you to see the full entry and to add the event to your own calendar.

Click this link for a fuller version of the TalkLaw/ParLoi calendar of events and for instructions as to how to add events and calendars to your own calendar.